File python-pyspnego.changes of Package python-pyspnego
-------------------------------------------------------------------
Tue Feb 22 09:26:20 UTC 2022 - Dirk Müller <dmueller@suse.com>
- update to 0.4.0:
* Add `usage` argument for `tls.default_tls_context` to control whether the
context is for a initiator or acceptor
* Add type annotations and include `py.typed` in the package for downstream
library use
* Expose the `ContextProxy` class for type annotation use
* Added `get_extra_info` to `ContextProxy` to expose a common way to retrieve
context specific information, this is currently used by CredSSP to retrieve
* `client_credential`: The delegated client credential for acceptors
once the context is complete
* `sslcontext`: The SSL context used to create the TLS object
* `ssl_object`: The TLS object used during the CredSSP exchange
* The `client_credential` property on `CredSSP` has been removed in
favour of `context.get_extra_info('client_credential')
* Added support for custom credential types
* Can be used to for things like NTLM authentication with NT/LM hashes,
Kerberos with a keytab or from an explicit CCache, etc
* Support calling SSPI through `pyspnego`'s Negotiate proxy context
* This allows users on Windows to still use Negotiate auth but with a
complex set of credentials
* Also opens up the ability to use Negotiate but only with Kerberos auth
* The `username` and `password` property on the auth context object are
deprecated and will return `None` until it is removed in a future release
-------------------------------------------------------------------
Sat Nov 6 11:10:17 UTC 2021 - Ben Greiner <code@bnavigator.de>
- Reactivate python36 build
-------------------------------------------------------------------
Fri Oct 29 18:44:17 UTC 2021 - Martin Hauke <mardnh@gmx.de>
- Update to version 0.3.1
* Do not convert GSSAPI service to lowercase for GSSAPI and
uppercase for SSPI
* SPNs are case insensitive on Windows but case sensitive on
Linux
* Convering the service portion to upper or lower case could
cause problems finding the target server on non-Windows
GSSAPI implementations
-------------------------------------------------------------------
Mon Oct 25 19:41:06 UTC 2021 - Martin Hauke <mardnh@gmx.de>
- Update to version 0.3.0
Packaging Changes
* Changed project structure to a src layout
* Include both Cython pyx/pyd and C files for SSPI in the
sdist generated
* Added Python 3.10 wheel
Bugfixes
* Ensure bad SPNEGO token inputs are raised as InvalidTokenError
rather than struct.error
- Update to version 0.2.0
Breaking Changes
* Drop support for Python 2.7 and 3.5 - new minimum is 3.6+
* Made the gss, negotiate, ntlm, sspi exports private, use the
spnego.client and spnego.server functions instead
+ A deprecation warning is raised when importing from these
package directly and this will be removed in the next major
release
Features
* Added support for CredSSP authentication using
protocol='credssp'
* Allow optional keyword arguments to be used with spnego.client
and spnego.server to control authentication specific options
Bugfixes
* Use Kerberos API to acquire Kerberos credential to get a
forwardable token in a thread safe manner
* Fix default credential logic when no username is provided
based on GSSAPI rules rather than just the default principal
* Ignore SPNEGO mechListMIC if it contains the same value as
the responseToken due to an old Windows SPNEGO logic bug.
* Do not use SSPI when auth='ntlm' and the password is in the
form {lm_hash}:{nt_hash}
-------------------------------------------------------------------
Thu May 13 16:27:28 UTC 2021 - Martin Hauke <mardnh@gmx.de>
- Update to version 0.1.6
* Change enum type of iov.BufferType to IntEnum to fix load on
Python 3.10 - #10
* Make pyspnego-parse and entry point which uses __main__.py in
the spnego package. This allows users to use the parser script
by running python -m spnego --token ...
-------------------------------------------------------------------
Tue Jan 12 09:47:29 UTC 2021 - Martin Hauke <mardnh@gmx.de>
- Update to version 0.1.5
* Respect NETBIOS_COMPUTER_NAME when getting the workstation
name for NTLM tokens. This matches the behaviour of gss-ntlmssp
to ensure a consistent approach.
-------------------------------------------------------------------
Fri Dec 4 08:13:16 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 0.1.4
* Only send negState: request-mic for the first reply from an
acceptor for Negotiate auth.
* Strict interpretations of SPNEGO will fail if the initiator
sends this state as it is against the RFC.
-------------------------------------------------------------------
Thu Oct 29 16:47:02 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 0.1.3
* Added Python 3.9 to CI
-------------------------------------------------------------------
Sun Oct 25 15:53:36 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Update to version 0.1.2
* Fix up WinRM wrapping on SSPI
- Update to version 0.1.1
* Include the cython files in the built sdist
-------------------------------------------------------------------
Sat Aug 22 14:27:14 UTC 2020 - Martin Hauke <mardnh@gmx.de>
- Initial package, version 0.1.0